>like a bad person gaining access to the car to hit people or something like that.

That can be eliminated by not giving direct control and something closer to what Waymo "Remote Assistance Agents" have access to: https://waymo.com/blog/2024/05/fleet-response/